fbb3aa026bb00b4b0d82e2f0cd8e9992_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbb3aa026bb00b4b0d82e2f0cd8e9992_JaffaCakes118
Size

128KB
MD5

fbb3aa026bb00b4b0d82e2f0cd8e9992
SHA1

194b09cd60c2240721cd1c6a84c3b49a1cb91495
SHA256

d4da0fe2826f0e5145814ee0b247f3bc9924cb6d323a184a73ac39fee4d32ed9
SHA512

961b8c6d7d5e2d5dcb855df1ce898df22fc7f366cb199ed1bfbb30a67104748be325899f26eabf61c436ee663c19bba11bc4a60479d73d863f34bdc7e84e1425
SSDEEP

3072:A6PpExGNC4XUTaiOMoPfWZ9oZZw0wT7hT513/8:DpExP4EfOFeAZxwhTv3/8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Comprovante.exe

Files

fbb3aa026bb00b4b0d82e2f0cd8e9992_JaffaCakes118
.zip
Comprovante.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ